You are not logged in

All the entered text is run through an XML parser internally and if it gives an error all the text is escaped. I will need to have a look at it to find a clever way to get around this.
Thanks for the bugreport.